Communication method and communication apparatus

Abstract

A communication method and a communication apparatus. In the method, a user plane network element can establish a first MASQUE connection with a terminal and establish a second MASQUE connection with an application server, and the user plane network element further determines mapping information, such that, on the basis of the first MASQUE connection and the second MASQUE connection and by means of the mapping information, the user plane network element can correctly forward a service packet between the terminal and the application server.

Description

Communication method and communication apparatus

[0001] Cross-reference to Related Applications

[0002] This application claims priority to the Chinese Patent Application No. 202411270100.6, filed on September 10, 2024, and entitled "A communication method and communication apparatus", the content of which is incorporated herein by reference in its entirety. TECHNICAL FIELD

[0003] The present application relates to the field of communication technology, and in particular to a communication method and a communication apparatus. BACKGROUND

[0004] In an architecture for data transmission based on a proxy device, a client and an application server (AS) transmit service packets through a proxy. Further, the client and the application server establish a multiplexed application substrate over QUIC encryption (MASQUE) connection based on QUIC encryption, and transmit service packets based on a QUIC protocol. QUIC refers to quick UDP internet connections.

[0005] Currently, it is considered to introduce a user plane network element into the architecture for data transmission based on a proxy device. After the introduction of the user plane network element, how to guarantee correct transmission of service packets needs to be solved. SUMMARY

[0006] Embodiments of the present application provide a communication method and a communication apparatus to guarantee correct transmission of service packets.

[0007] In a first aspect, an embodiment of the present application provides a communication method, which can be applied to a network side, such as a user plane network element of the network side, a module (such as a circuit, a chip or a chip system, etc.) in the user plane network element, or a logic node, a logic module or software capable of realizing all or part of the functions of the user plane network element. The method comprises: obtaining a first virtual client connection identifier of a terminal corresponding to a first MASQUE connection and a first virtual target connection identifier of a user plane network element, and a second virtual client connection identifier of the user plane network element corresponding to a second MASQUE connection and a second virtual target connection identifier of an application server; wherein the first MASQUE connection is a MASQUE connection between the user plane network element and the terminal, and the second MASQUE connection is a MASQUE connection between the user plane network element and the application server; the first virtual client connection identifier of the terminal and the first virtual target connection identifier of the user plane network element are used for transmission of service packets between the terminal and the user plane network element, and the second virtual client connection identifier of the user plane network element and the second virtual target connection identifier of the application server are used for transmission of service packets between the user plane network element and the application server; determining mapping information, the mapping information being used for indicating a mapping relationship between the first virtual client connection identifier of the terminal and the second virtual client connection identifier of the user plane network element, and a mapping relationship between the first virtual target connection identifier of the user plane network element and the second virtual target connection identifier of the application server; wherein the mapping information is used for forwarding service packets transmitted between the terminal and the application server through the first MASQUE connection and the second MASQUE connection.

[0008] Based on the above scheme, the user plane network element can establish a first MASQUE connection with the terminal, and a second MASQUE connection with the application server, and the user plane network element also determines mapping information, so that the user plane network element can realize correct forwarding of service packets between the terminal and the application server based on the first MASQUE connection and the second MASQUE connection, and by using the mapping information.

[0009] In a possible implementation method, the obtaining of the first virtual client connection identifier of the terminal corresponding to the first MASQUE connection and the first virtual target connection identifier of the user plane network element comprises: receiving a first registration message from the terminal, the first registration message comprising the first virtual client connection identifier of the terminal and the first target connection identifier of the user plane network element; and determining the first virtual target connection identifier of the user plane network element according to the first target connection identifier of the user plane network element.

[0010] Based on the above scheme, the user plane network element can accurately obtain the connection identifier for service message transmission by using the registration mechanism, which is helpful for correct transmission of the service message.

[0011] In a possible implementation method, the first registration message further includes identity information of the application server; and the method further includes: establishing the second MASQUE connection between the user plane network element and the application server according to the identity information of the application server.

[0012] Based on the above scheme, the MASQUE connection between the user plane network element and the application server can be correctly established.

[0013] In a possible implementation method, the method further includes: determining a second target connection identifier of the application server according to the identity information of the application server.

[0014] Based on the above scheme, the target connection identifier of the application server can be accurately determined.

[0015] In a possible implementation method, the obtaining of the second virtual client connection identifier of the user plane network element and the second virtual target connection identifier of the application server corresponding to the second MASQUE connection includes: generating the second virtual client connection identifier of the user plane network element; sending, to the application server, the second registration message, the second registration message including the second target connection identifier of the application server; and receiving, from the application server, the second virtual target connection identifier of the application server, the second virtual target connection identifier of the application server being generated based on the second target connection identifier of the application server.

[0016] Based on the above scheme, the user plane network element can accurately obtain the connection identifier for service message transmission by using the registration mechanism, which is helpful for correct transmission of the service message.

[0017] In a possible implementation method, the generating of the second virtual client connection identifier of the user plane network element includes: generating the second virtual client connection identifier of the user plane network element according to a second client connection identifier of the user plane network element.

[0018] Based on the above scheme, the virtual client connection identifier of the user plane network element can be accurately determined.

[0019] In a possible implementation, before the first virtual client connection identifier of the terminal corresponding to the first MASQUE connection and the first virtual target connection identifier of the user plane network element are acquired, the method further includes: receiving a third registration message from the terminal, the third registration message including a third client connection identifier of the terminal; and sending first indication information to the terminal, the first indication information being used to indicate that the third client connection identifier of the terminal is in conflict.

[0020] Based on the foregoing scheme, the conflict detection mechanism can be used to avoid the client connection identifier of the terminal from being in conflict, thereby facilitating correct transmission of a service message.

[0021] In a possible implementation, before the second virtual client connection identifier of the user plane network element corresponding to the second MASQUE connection and the second virtual target connection identifier of the application server are acquired, the method further includes: sending a fourth registration message to the application server, the fourth registration message including a fourth client connection identifier of the user plane network element; and receiving second indication information from the application server, the second indication information being used to indicate that the fourth client connection identifier of the user plane network element is in conflict.

[0022] Based on the foregoing scheme, the conflict detection mechanism can be used to avoid the client connection identifier of the user plane network element from being in conflict, thereby facilitating correct transmission of a service message.

[0023] In a possible implementation, the method further includes: in a case where it is detected that service interruption or termination between the terminal and the application server ends, releasing the first MASQUE connection and / or the second MASQUE connection.

[0024] Based on the foregoing scheme, the power consumption of the user plane network element, the terminal, and the application server can be saved.

[0025] In a possible implementation, the mapping information is further used to indicate a mapping relationship between the first client connection identifier of the terminal and the second virtual client connection identifier of the user plane network element.

[0026] Based on the foregoing scheme, the mapping information is used to correctly forward a service message between the terminal and the application server.

[0027] In a possible implementation, the mapping information is further used to indicate a mapping relationship between the second target connection identifier of the application server and the first virtual target connection identifier of the user plane network element.

[0028] Based on the foregoing scheme, the mapping information is used to correctly forward a service message between the terminal and the application server.

[0029] In a possible implementation, the method further includes: receiving a first uplink message from the terminal, the first uplink message comprising a first virtual target connection identifier of the user plane network element; and sending a second uplink message to the application server according to the first uplink message and the mapping information, the second uplink message comprising a second virtual target connection identifier of the application server.

[0030] According to the above scheme, the mapping information is used to correctly forward the uplink service message between the terminal and the application server.

[0031] In a possible implementation, the first uplink message further comprises a first virtual client connection identifier of the terminal.

[0032] According to the above scheme, the first virtual client connection identifier of the terminal is included in the first uplink message, and it can be determined that the message content in the first uplink message is from the terminal.

[0033] In a possible implementation, the second uplink message further comprises a first client connection identifier of the terminal.

[0034] According to the above scheme, the first client connection identifier of the terminal is included in the second uplink message, and it can be determined that the message content in the second uplink message is from the terminal.

[0035] In a possible implementation, the method further includes: receiving a first downlink message, the first downlink message comprising a second virtual client connection identifier of the user plane network element; and sending a second downlink message to the terminal according to the first downlink message and the mapping information, the second downlink message comprising a first client connection identifier of the terminal.

[0036] According to the above scheme, the mapping information is used to correctly forward the downlink service message between the terminal and the application server.

[0037] In a possible implementation, the first downlink message further comprises a second virtual target connection identifier of the application server.

[0038] According to the above scheme, the second virtual target connection identifier of the application server is included in the first downlink message, and it can be determined that the message content in the first downlink message is from the application server.

[0039] In a possible implementation, the second downlink message further comprises a second target connection identifier of the application server.

[0040] According to the above scheme, the second target connection identifier of the application server is included in the second downlink message, and it can be determined that the message content in the second downlink message is from the application server.

[0041] In a second aspect, an embodiment of the present application provides a communication method, which can be applied to a terminal side, for example, a terminal or a communication module in the terminal, or a circuit or chip (for example, a modem chip, also known as a baseband chip, or a system on chip (SoC) chip or a system in package (SIP) chip including a modem core) responsible for a communication function in the terminal. The method comprises: sending a first registration message to a user plane network element, the first registration message comprising a first target connection identifier of the user plane network element; and receiving a first virtual target connection identifier of the user plane network element from the user plane network element, the first virtual target connection identifier of the user plane network element being determined according to the first target connection identifier of the user plane network element.

[0042] Based on the above scheme, by using the registration mechanism, the terminal and the user plane network element can accurately obtain the connection identifier for service message transmission, which is helpful for correct transmission of the service message.

[0043] In a possible implementation method, the first registration message further comprises a first client connection identifier of the terminal and / or a first virtual client connection identifier of the terminal.

[0044] In a third aspect, the present application provides a communication apparatus, which has the functions of the first aspect, for example, the communication apparatus comprises modules, units or means corresponding to the operations of the first aspect, which can be implemented by software, or by hardware, or by a combination of software and hardware.

[0045] In a fourth aspect, the present application provides a communication apparatus, which has the functions of the second aspect, for example, the communication apparatus comprises modules, units or means corresponding to the operations of the second aspect, which can be implemented by software, or by hardware, or by a combination of software and hardware.

[0046] In a fifth aspect, the present application provides a communication apparatus, which comprises an interface circuit and one or more processors. The one or more processors are coupled with a memory. The memory is used to store part or all of the necessary computer programs or instructions for implementing the functions of the first aspect. The one or more processors can execute the computer programs or instructions, when the computer programs or instructions are executed, so that the communication apparatus implements the method in any possible design or implementation manner in the first aspect. The interface circuit is used to implement the communication function within the communication apparatus and / or the communication function of the communication apparatus and other devices or components.

[0047] The communication device can be a user plane network element, a module (e.g., a circuit, a chip, or a chip system) in the user plane network element, or a logic node, a logic module, or software capable of implementing all or part of the functions of the user plane network element.

[0048] In a sixth aspect, the present application provides a communication device, which includes an interface circuit and one or more processors. The one or more processors are coupled with a memory. The memory is configured to store part or all of the computer programs or instructions necessary to implement the functions of the second aspect. The one or more processors can execute the computer programs or instructions, which, when executed, cause the communication device to implement the method in any possible design or implementation manner of the second aspect. The interface circuit is configured to implement the communication function within the communication device and / or the communication function of the communication device with other devices or components.

[0049] The communication device can be a terminal or a communication module in the terminal, or a circuit or chip (e.g., a modem chip, or a SoC chip or SIP chip including a modem core) responsible for the communication function in the terminal.

[0050] In a seventh aspect, the present application provides a chip (or chip system), which includes a processor configured to implement any possible implementation method of the first aspect to the second aspect.

[0051] In an eighth aspect, the present application provides a computer-readable storage medium, which stores computer programs or instructions, which, when executed, implement the method in any possible design of the first aspect to the second aspect.

[0052] In a ninth aspect, the present application provides a computer program product, which includes computer programs or instructions, which, when executed, implement the method in any possible design of the first aspect to the second aspect. BRIEF DESCRIPTION OF DRAWINGS

[0053] FIG. 1 is a schematic diagram of a network architecture based on a service-oriented architecture;

[0054] FIG. 2 is a schematic diagram of a protocol stack structure;

[0055] FIG. 3 is a schematic diagram of data transmission based on a proxy device;

[0056] FIG. 4 is a schematic diagram of a communication method provided by an embodiment of the present application;

[0057] FIG. 5 is a schematic diagram of data transmission based on a proxy device and a user plane network element;

[0058] FIG. 6 is a flow diagram of a communication method according to an embodiment of the present application;

[0059] FIG. 7 is a flow diagram of a communication method according to an embodiment of the present application;

[0060] FIG. 8 is a possible exemplary block diagram of a communication apparatus according to an embodiment of the present application;

[0061] FIG. 9 is a possible exemplary block diagram of a communication apparatus according to an embodiment of the present application. DETAILED DESCRIPTION

[0062] FIG. 1 is a schematic diagram of a network architecture based on a service-based architecture. The network architecture shown in FIG. 1 can include access network devices and core network devices. A terminal accesses a data network (DN) through the access network devices and the core network devices. The core network devices include, but are not limited to, some or all of the following network elements: an authentication server function (AUSF) network element, a unified data management (UDM) network element, a unified data repository (UDR) network element, a network repository function (NRF) network element, a network exposure function (NEF) network element, an application function (AF) network element, a policy control function (PCF) network element, an access and mobility management function (AMF) network element, a session management function (SMF) network element, and a user plane function (UPF) network element.

[0063] It should be noted that the above various network elements (e.g., SMF network element, UPF network element, etc.) can omit the "network element" when described, for example, the SMF network element is simply referred to as SMF, the UPF network element is simply referred to as UPF, and the like. In FIG. 1, such a brief description is also used.

[0064] The access network device, which can also be referred to as a RAN node, a RAN entity, or an access node, etc., is used to help the terminal to realize wireless access.

[0065] In a possible scenario, the access network device can be a base station, an evolved NodeB (eNodeB), an access point (AP), a transmission reception point (TRP), a next generation NodeB (gNB), a base station in a future mobile communication system, or an access node in a wireless fidelity (WiFi) system, etc. The access network device can be a macro base station, a micro base station, or an indoor station, a relay node or a donor node. Optionally, the access network device can also be a server, a wearable device, a vehicle or a vehicle-mounted device, etc. For example, the access network device in vehicle to everything (V2X) technology can be a road side unit (RSU). All or part of the functions of the access network device in this application can also be implemented by software functions running on hardware, or by virtualized functions instantiated on a platform (such as a cloud platform). The access network device can also be provided with a communication module, circuit or chip for performing corresponding communication functions, and program instructions for performing corresponding communication functions. The access network device in this application can also be a logical node, a logical module or software that can implement all or part of the functions of the access network device.

[0066] In another possible scenario, multiple access network devices cooperate to assist a terminal to implement wireless access, and different access network devices respectively implement part of the functions of a base station. For example, the access network device can be a central unit (CU), a distributed unit (DU), a CU-control plane (CP), a CU-user plane (UP), or a radio unit (RU), etc. The CU and the DU can be separately arranged, or can be included in the same network element, such as a baseband unit (BBU). The RU can be included in a radio frequency device or a radio frequency unit, such as a remote radio unit (RRU), an active antenna processing unit (AAU), or a remote radio head (RRH).

[0067] In different systems, the CU (or CU-CP and CU-UP), DU or RU can also have different names, but those skilled in the art can understand their meanings. For example, in an open radio access network (ORAN) system, the CU can also be referred to as an O-CU (open CU), the DU can also be referred to as an O-DU, the CU-CP can also be referred to as an O-CU-CP, the CU-UP can also be referred to as an O-CU-UP, and the RU can also be referred to as an O-RU. For the convenience of description, the CU, CU-CP, CU-UP, DU and RU are taken as examples for description in this application. Any one of the CU (or CU-CP, CU-UP), DU and RU in this application can be implemented by a software module, a hardware module, or a combination of a software module and a hardware module.

[0068] The terminal can also be referred to as a terminal device, user equipment (UE), mobile station, mobile terminal, etc. The terminal can be widely applied to various scenarios, such as device-to-device (D2D), vehicle to everything (V2X) communication, machine-type communication (MTC), internet of things (IOT), virtual reality, augmented reality, industrial control, autonomous driving, remote medical treatment, smart power grid, smart furniture, smart office, smart wear, smart transportation, smart city, etc. The terminal can be a mobile phone, tablet computer, computer with wireless transceiver function, wearable device, vehicle, unmanned aerial vehicle, helicopter, airplane, ship, robot, mechanical arm, smart home device, wireless communication function transport vehicle, communication module, etc. Embodiments of the present application do not limit the device form of the terminal. The terminal is usually provided with a communication module, circuit or chip for executing corresponding communication functions. The terminal is also configured with program instructions for executing corresponding communication functions.

[0069] The access network device and the terminal can be fixed in position or movable. The access network device and the terminal can be deployed on land, including indoors or outdoors, handheld or vehicle-mounted; can also be deployed on the water surface; can also be deployed on aircraft, balloons and artificial satellites in the air. Embodiments of the present application do not limit the application scenarios of the access network device and the terminal.

[0070] The AMF network element includes functions such as performing mobility management, or access authentication / authorization. In addition, it is also responsible for transmitting user policies between the terminal and the PCF network element.

[0071] SMF network element, including functions of performing session management, performing control policy issued by PCF network element, selecting UPF network element, or allocating internet protocol (IP) address of terminal, etc.

[0072] UPF network element, including functions of completing user plane data forwarding, session / stream level based charging statistics, or bandwidth limitation, etc.

[0073] UDM network element, including functions of performing management of subscription data, or user access authorization, etc.

[0074] UDR, including functions of accessing data of types of subscription data, policy data, or application data, etc.

[0075] NEF network element, used for supporting opening of capabilities and events.

[0076] AF network element, delivering requirements of application side to network side, such as quality of service (QoS) requirement or user state event subscription, etc. AF can be a third party functional entity, or an application service deployed by an operator, such as IP Multimedia Subsystem (IMS) voice call service. Among them, the AF network element includes an AF network element in the core network (i.e. an AF network element of an operator) and a third party AF network element (such as an application server (AS) of an enterprise, etc.).

[0077] PCF network element, including policy control functions of charging for session, service flow level, QoS bandwidth guarantee and mobility management, or terminal policy decision, etc.

[0078] NRF network element, which can be used to provide network element discovery function, and provide network element information corresponding to a network element type based on a request of another network element. The NRF network element also provides network element management services, such as network element registration, update, deregistration, or network element state subscription and push, etc.

[0079] AUSF network element, responsible for authenticating a user to determine whether to allow the user or device to access the network.

[0080] DN is a network outside the operator network, the operator network can access multiple DN, and multiple services can be deployed on the DN, and data and / or voice services can be provided for terminals. For example, the DN is a private network of a certain intelligent factory, the sensors installed in the workshop of the intelligent factory can be terminals, and a control server of the sensors is deployed in the DN, and the control server can provide services for the sensors. The sensors can communicate with the control server, obtain instructions from the control server, and transmit the collected sensor data to the control server according to the instructions. For another example, the DN is an internal office network of a certain company, and the mobile phones or computers of the employees of the company can be terminals, and the mobile phones or computers of the employees can access information and data resources on the internal office network of the company.

[0081] In FIG. 1, Nausf, Npcf, Nudr, Nudm, Naf, Namf, Nsmf, Nnef, and Nnrf are service-based interfaces (SBIs) provided by the AUSF, PCF, UDR, UDM, AF, AMF, SMF, NEF, and NRF respectively, and are used to invoke corresponding service operations. N1, N2, N3, N4, and N6 are interface sequence numbers, and the meanings of these interface sequence numbers are as follows:

[0082] 1) N1: an interface between the AMF network element and the terminal, which can be used to transmit non-access stratum (NAS) signaling (such as QoS rules from the AMF network element) to the terminal, etc.

[0083] 2) N2: an interface between the AMF network element and the access network device, which can be used to transmit wireless bearer control information from the core network side to the access network device, etc.

[0084] 3) N3: an interface between the access network device and the UPF network element, which is mainly used to transmit uplink and downlink user plane data between the access network device and the UPF network element.

[0085] 4) N4: an interface between the SMF network element and the UPF network element, which can be used to transmit information between the control plane and the user plane, including the transmission of forwarding rules, QoS rules, and traffic statistics rules from the control plane to the user plane, and the information reporting of the user plane.

[0086] 5) N6: an interface between the UPF network element and the DN, which is used to transmit uplink and downlink user data streams between the UPF network element and the DN.

[0087] The various network function network elements in the architecture shown in FIG. 1 are connected through a service bus and interact through service interfaces. The service bus has the advantages of improving the flexibility, openness, scalability and intelligence of the network, and can support diversified business scenarios and requirements. The service bus can be used to transmit various types of data and signaling, such as real-time signaling (for example, service interface call signaling between network elements of the function network element) sensitive to latency, real-time data (for example, real-time artificial intelligence inference data) sensitive to latency, and non-real-time data (for example, data for offline artificial intelligence training). Moreover, when the service bus transmits these data or signaling, the data or signaling are coupled together, that is, the service bus can be used to transmit real-time signaling, real-time data and non-real-time data at the same time.

[0088] It can be understood that the above network element or function can be a network element in a hardware device, or a software function running on a dedicated hardware, or a virtualized function instantiated on a platform (for example, a cloud platform). Optionally, the above network element or function can be implemented by one device, or can be implemented by multiple devices together, or can be a functional module in a device, and the embodiments of the present application do not make specific limitations thereto.

[0089] The user plane network element in the present application can be the UPF network element in FIG. 1, or a network element having the function of the above UPF network element in a future communication network, and the present application does not make limitations thereto.

[0090] In order to facilitate understanding of the content of the present application, the following explains the terms or terms related to the present application.

[0091] 1) QUIC

[0092] QUIC can also be referred to as Google QUIC (gQUIC), which is a reliable UDP transport protocol designed by Google in 2012, aiming to provide a secure, reliable, efficient and low-latency communication guarantee for the Hyper Text Transfer Protocol (HTTP). The QUIC protocol has been adopted as a standard by the Internet Engineering Task Force (IETF), and HTTP / 3 has chosen to use the QUIC protocol instead of the Transmission Control Protocol (TCP) as its transport layer protocol.

[0093] FIG. 2 is a schematic diagram of a protocol stack structure. Since the QUIC protocol is built on UDP, the space for customization and optimization of the QUIC protocol is greater relative to other protocols such as HTTP 1.1 or HTTP / 2 (also referred to as HTTP2) over TCP. At the upper layer of UDP, the QUIC protocol provides reliable, ordered, secure, and faster transmission services. At present, a large number of request responses of businesses are carried through QUIC, and it can be said that the QUIC protocol has become a new generation of transport layer protocol. The TLS in FIG. 2 refers to transport layer security, and the IP refers to internet protocol.

[0094] 2) MASQUE

[0095] In the existing network implementation, proxy devices are needed in many scenarios. For example, proxy devices are needed when end-to-end connections cannot be directly interconnected, when virtual private network (VPN) encryption communication is needed, and when security isolation or privacy protection is needed. Among them, the proxy device is also called a proxy or a proxy device, etc.

[0096] The existing HTTP connection (connect) only supports TCP connection and the signaling of the protocol for sessions traversal across firewall securely (socks) is not encrypted. Based on this background, the scenario of HTTP / 3 over QUIC is derived, and a new proxy protocol needs to be introduced. Among them, HTTP / 3 can also be referred to as HTTP3 or HTTP over QUIC.

[0097] MASQUE is a framework that allows multiple network applications to run concurrently within an HTTP / 3 connection. For example, MASQUE allows a QUIC client to negotiate proxy functionality with an HTTP / 3 server, and then use this functionality while concurrently processing HTTP / 3 requests and responses.

[0098] FIG. 3 is a schematic diagram of data transmission based on a proxy device. The client and the application server perform data transmission through the proxy device. Among them, the client can be a QUIC client, the application server can be an HTTP / 3 server, and the application server is also referred to as a target server or a target.

[0099] In the data transmission, a connection ID (CID) is used to identify the end-to-end QUIC transmission between the client and the application server, which includes a client connection ID (client CID) for indicating the client and a target connection ID (target CID) for indicating the application server. In the uplink direction, the target connection ID is included in the data packet sent by the client, which is used to indicate the receiving device, i.e., the application server. In the downlink direction, the client connection ID is included in the data packet sent by the application server, which is used to indicate that the receiving device is the client.

[0100] However, based on this way, since the information related to the proxy device is not included in the data packet, the data packet cannot be correctly sent to the proxy device and routed by the proxy device. To solve this problem, a virtual connection ID is introduced, which is used for data transmission between the client and the proxy device, i.e., the virtual connection ID is introduced when the proxy device participates in the data transmission. And,

[0101] The connection ID includes the client connection ID of the client and the target connection ID of the application server, which are used for data transmission between the proxy device and the application server. The virtual connection ID includes a virtual client connection ID (virtual client CID) of the client and a virtual target connection ID (virtual target CID) of the application server, which are used for data transmission between the client and the proxy device.

[0102] The virtual client connection identifier of the client is created by the client based on the client connection identifier of the client, and the client includes the client connection identifier of the client, the target connection identifier of the application server and the virtual client connection identifier of the client in the registration message sent to the proxy device, and the proxy device generates the virtual target connection identifier of the application server according to the received target connection identifier of the application server, and sends the virtual target connection identifier of the application server to the client in the response message. Therefore, the client and the proxy device can save the mapping relationship between the client connection identifier of the client, the target connection identifier of the application server, the virtual client connection identifier of the client and the virtual target connection identifier of the application server. Wherein, the registration message can be a register client connection identifier (register_client_CID) message, and the response message can be an acknowledge target connection identifier (ack_target_CID) message.

[0103] The proxy device supports two modes of processing QUIC data packets:

[0104] 1) Tunnelled: based on the tunnelled mode, the QUIC data packets between the client and the application server are encapsulated in the QUIC data packets between the client and the proxy device and use multi-layer encryption and congestion control. Wherein, the tunnelled mode is the default mode of the UDP proxy. The QUIC long header data packet must use this mode, and the QUIC short header data packet can use this mode or not.

[0105] 2) Forwarded: based on the forwarded mode, the QUIC data packets between the client and the application server are sent through the UDP socket between the client and the proxy device separately, and special-purpose conversion is used instead of complete QUIC encapsulation. This mode can only be used for QUIC short header data packets.

[0106] The user plane network element (for example, the UPF network element) supports sensing the address information of the application server (for example, the HTTP / 3 server), and the user plane network element can establish a MASQUE connection with the application server based on the sensed address information of the application server.

[0107] At present, the user plane network element is considered to be introduced into the architecture for data transmission based on the proxy device. After the introduction of the user plane network element, how to guarantee the correct transmission of service messages needs to be solved.

[0108] To solve the above problems, the present application provides a corresponding solution.

[0109] The communication method and the communication device provided in the present application are described below with reference to the drawings. It can be understood that the terminal, the user plane network element and the application server are taken as examples of the execution subject of the interaction in the present application, but the present application is not limited to the execution subject of the interaction. The method executed by the terminal in the present application can also be implemented by a communication module in the terminal, or a circuit or a chip (such as a modem chip, or a SoC chip or a SIP chip including a modem core) responsible for the communication function in the terminal. The method executed by the user plane network element in the present application can also be implemented by a module (such as a circuit, a chip or a chip system, etc.) in the user plane network element, or a logical node, a logical module or software capable of implementing all or part of the function of the user plane network element. The method executed by the application server in the present application can also be implemented by a module (such as a circuit, a chip or a chip system, etc.) in the application server, or a logical node, a logical module or software capable of implementing all or part of the function of the application server.

[0110] FIG. 4 is a flowchart of a communication method provided in an embodiment of the present application. The method comprises the following steps:

[0111] In step 401, the user plane network element acquires a first virtual client connection identifier of a terminal corresponding to a first MASQUE connection and a first virtual target connection identifier of the user plane network element, and a second virtual client connection identifier of the user plane network element and a second virtual target connection identifier of an application server corresponding to a second MASQUE connection.

[0112] The first MASQUE connection is a MASQUE connection between the user plane network element and the terminal, and the first virtual client connection identifier of the terminal and the first virtual target connection identifier of the user plane network element are used for transmission of service packets between the terminal and the user plane network element. That is, the first MASQUE connection is established between the user plane network element and the terminal, and the user plane network element can perform transmission of service packets with the terminal through the first MASQUE connection based on the first virtual client connection identifier of the terminal and the first virtual target connection identifier of the user plane network element.

[0113] The second MASQUE connection is a MASQUE connection between the user plane network element and the application server, and the second virtual client connection identifier of the user plane network element and the second virtual target connection identifier of the application server are used for transmission of service packets between the user plane network element and the application server. That is, the second MASQUE connection is established between the user plane network element and the application server, and the user plane network element can perform transmission of service packets with the application server through the second MASQUE connection based on the second virtual client connection identifier of the user plane network element and the second virtual target connection identifier of the application server.

[0114] Figure 5 is a schematic diagram of data transmission based on a proxy device and a user plane network element. The terminal in Figure 5 is an example of a client. The proxy device in Figure 5 refers to a proxy device on the application server side, which can be deployed on the same physical device as the application server or on a different physical device from the application server. The proxy device on the application server side corresponds to the application server one-to-one, that is, each application server corresponds to a proxy device on the application server side. In addition, there is also a proxy device (not shown in the figure) on the user plane network element side, which can be deployed on the same physical device as the user plane network element or on a different physical device from the user plane network element. The proxy device on the user plane network element side corresponds to the user plane network element one-to-one, that is, each user plane network element corresponds to a proxy device on the user plane network element side.

[0115] Referring to Figure 5, in the first MASQUE connection, the terminal is similar to the client in Figure 3, and the user plane network element is similar to the application server in Figure 3. The first virtual client connection identifier of the terminal and the first virtual target connection identifier of the user plane network element are used for service message transmission between the terminal and the user plane network element. The service message transmission between the terminal and the user plane network element can be service transmission message between the terminal and the proxy device on the user plane network element side based on the first virtual client connection identifier of the terminal and the first virtual target connection identifier of the user plane network element, and service message transmission between the proxy device on the user plane network element side and the user plane network element based on the first client connection identifier of the terminal and the first target connection identifier of the user plane network element.

[0116] Referring to Figure 5, in the second MASQUE connection, the user plane network element is similar to the client in Figure 3, and the application server is similar to the application server in Figure 3. The second virtual client connection identifier of the user plane network element and the second virtual target connection identifier of the application server are used for service message transmission between the user plane network element and the application server. The service message transmission between the user plane network element and the application server can be service transmission message between the user plane network element and the proxy device on the application server side based on the second virtual client connection identifier of the user plane network element and the second virtual target connection identifier of the application server, and service message transmission between the proxy device on the application server side and the application server based on the second client connection identifier of the user plane network element and the second target connection identifier of the application server.

[0117] Step 402, the user plane network element determines the mapping information.

[0118] The mapping information is used for forwarding service messages transmitted between the terminal and the application server through the first MASQUE connection and the second MASQUE connection. That is, in the uplink direction, the user plane network element receives the uplink service message from the terminal, and can accurately send the uplink service message to the application server or the proxy device on the application server side corresponding to the uplink service message based on the mapping information. In the downlink direction, the user plane network element receives the downlink service message from the application server, and can accurately send the downlink service message to the terminal corresponding to the downlink service message based on the mapping information.

[0119] The mapping information is used to indicate one or more of the following mapping relationship #1~mapping relationship #6.

[0120] The mapping relationship #1 is a mapping relationship between the first virtual client connection identifier of the terminal and the second virtual client connection identifier of the user plane network element.

[0121] The mapping relationship #2 is a mapping relationship between the first virtual target connection identifier of the user plane network element and the second virtual target connection identifier of the application server.

[0122] The mapping relationship #3 is a mapping relationship between the first client connection identifier of the terminal and the first virtual client connection identifier of the terminal.

[0123] The mapping relationship #4 is a mapping relationship between the first client connection identifier of the terminal and the second virtual client connection identifier of the user plane network element.

[0124] The mapping relationship #5 is a mapping relationship between the second target connection identifier of the application server and the first virtual target connection identifier of the user plane network element.

[0125] The mapping relationship #6 is a mapping relationship between the second target connection identifier of the application server and the second virtual target connection identifier of the application server.

[0126] The following Table 1 shows the content indicated by the mapping information.

[0127] Table 1

[0128] Based on the above scheme, the user plane network element can establish the first MASQUE connection with the terminal and the second MASQUE connection with the application server, and the user plane network element also determines the mapping information, so that the user plane network element can correctly forward the service messages between the terminal and the application server based on the first MASQUE connection and the second MASQUE connection and by using the mapping information.

[0129] The following describes the process of message transmission.

[0130] Case one, for uplink transmission message

[0131] The terminal sends a first uplink message to the user plane network element, the first uplink message comprising a first virtual target connection identifier of the user plane network element. Optionally, the first uplink message further comprises a first UDP header and a first UDP message body, the first UDP message body comprising message content to be transmitted.

[0132] Optionally, the first uplink message further comprises at least one of a first client connection identifier of the terminal, a first virtual client connection identifier of the terminal, or a first target connection identifier of the user plane network element. The user plane network element can determine that the first uplink message is from the terminal based on at least one of a second virtual client connection identifier of the user plane network element, the first virtual client connection identifier of the terminal, or the first target connection identifier of the user plane network element.

[0133] The user plane network element receives the first uplink message, determines a second uplink message according to the first uplink message and the mapping information, and sends the second uplink message to the application server, the second uplink message comprising a second virtual target connection identifier of the application server. Optionally, the second uplink message further comprises the first UDP header and the first UDP message body.

[0134] Optionally, the second uplink message further comprises the first client connection identifier of the terminal and / or a second virtual client connection identifier of the user plane network element. The application server can determine that the message content comprised in the second uplink message is from the terminal based on the first client connection identifier of the terminal and / or the second virtual client connection identifier of the user plane network element.

[0135] Case two, for downlink transmission messages

[0136] The application server sends a first downlink message to the user plane network element, the first downlink message comprising a second virtual client connection identifier of the user plane network element. Optionally, the first downlink message further comprises a second UDP header and a second UDP message body, the second UDP message body comprising message content to be transmitted.

[0137] Optionally, the first downlink message further comprises a second virtual target connection identifier of the application server. The user plane network element can determine that the first downlink message is from the application server based on the second virtual target connection identifier of the application server.

[0138] The user plane network element receives the first downlink message, determines a second downlink message according to the first downlink message and the mapping information, and sends the second downlink message to the terminal, the second downlink message comprising a first client connection identifier of the terminal. Optionally, the second downlink message further comprises the second UDP header and the second UDP message body.

[0139] Optionally, the second downlink message further comprises a second target connection identifier of the application server. The terminal can determine that the message content comprised in the second downlink message is from the application server based on the second target connection identifier of the application server.

[0140] The following describes a possible implementation method of the step 201.

[0141] In a possible implementation method, in the step 201, the user plane network element acquires the first virtual client connection identifier of the terminal corresponding to the first MASQUE connection and the first virtual target connection identifier of the user plane network element, which can be implemented in the following manner. The user plane network element receives a first registration message from the terminal, the first registration message comprising the first virtual client connection identifier of the terminal and the first target connection identifier of the user plane network element. The user plane network element acquires the first virtual client connection identifier of the terminal from the first registration message. The user plane network element determines the first virtual target connection identifier of the user plane network element based on the first target connection identifier of the user plane network element.

[0142] Optionally, the first registration message further comprises a first client connection identifier of the terminal. The first virtual client connection identifier of the terminal can be generated by the terminal based on the first client connection identifier of the terminal.

[0143] Optionally, after receiving the first registration message, the user plane network element further sends a first response message to the terminal, the first response message comprising the first virtual target connection identifier of the user plane network element.

[0144] Optionally, the first registration message further comprises identity information of the application server, for example, comprising an identifier and / or address information (such as an IP address, or an IP address and a port number) of the application server. The user plane network element can establish the second MASQUE connection between the user plane network element and the application server based on the identity information of the application server. Alternatively, in another implementation method, the identity information of the application server can also be comprised in other messages sent by the terminal to the user plane network element, and then the user plane network element acquires the identity information of the application server from the message. Based on this method, the second MASQUE connection between the user plane network element and the application server can be correctly established.

[0145] Optionally, the user plane network element can further determine a second target connection identifier of the application server based on the identity information of the application server.

[0146] In a possible implementation, in step 201, the user plane network element obtaining the second virtual client connection identifier of the user plane network element corresponding to the second MASQUE connection and the second virtual target connection identifier of the application server can be: the user plane network element generating the second virtual client connection identifier of the user plane network element, and sending a second registration message to the application server, the second registration message including the second target connection identifier of the application server, the application server generating the second virtual target connection identifier of the application server according to the second target connection identifier of the application server, and then the application server sending a second response message to the user plane network element, the second response message including the second virtual target connection identifier of the application server.

[0147] Optionally, the second registration message further includes the second client connection identifier of the user plane network element and / or the second virtual client connection identifier of the user plane network element.

[0148] For example, the user plane network element generating the second virtual client connection identifier of the user plane network element can be: the user plane network element generating the second virtual client connection identifier of the user plane network element according to the second client connection identifier of the user plane network element.

[0149] The conflict detection mechanism of the client connection identifier provided by the embodiments of the present application is introduced below.

[0150] In a possible implementation, before obtaining the first virtual client connection identifier of the terminal corresponding to the first MASQUE connection and the first virtual target connection identifier of the user plane network element, the user plane network element receives a third registration message from the terminal, the third registration message including a third client connection identifier of the terminal, and optionally, the third registration message further including a third virtual client connection identifier of the terminal and a third target connection identifier of the user plane network element. The user plane network element performs conflict detection on the third client connection identifier of the terminal, and if it is found that the third client connection identifier has been registered by the terminal or other terminals, the user plane network element sends first indication information to the terminal, the first indication information being used to indicate that the third client connection identifier of the terminal is in conflict. The terminal receives the first indication information, re-generates a client connection identifier, for example, the first client connection identifier of the terminal described above, and then sends the first registration message described above to the user plane network element. The first indication information can be included in the third response message, or the first indication information is the third response message. Based on this method, the conflict detection mechanism can be used to avoid the conflict of the client connection identifier of the terminal, which is helpful for the correct transmission of the service message.

[0151] In a possible implementation, before obtaining the second virtual client connection identifier of the user plane network element corresponding to the second MASQUE connection and the second virtual target connection identifier of the application server, the user plane network element sends a fourth registration message to the application server, where the fourth registration message includes a fourth client connection identifier of the user plane network element, and optionally, the fourth registration message further includes a fourth virtual client connection identifier of the user plane network element and a fourth target connection identifier of the application server. The application server performs conflict detection on the fourth client connection identifier of the user plane network element, and if it is found that the fourth client connection identifier has been registered by the user plane network element or another user plane network element, the application server sends second indication information to the user plane network element, where the second indication information is used to indicate that the fourth client connection identifier of the user plane network element is in conflict. After receiving the second indication information, the user plane network element generates a new client connection identifier, for example, the second client connection identifier of the user plane network element described above, and then sends the second registration message described above to the application server. The second indication information can be included in the fourth response message, or the second indication information is the fourth response message. Based on this method, the conflict detection mechanism can be used to avoid the conflict of the client connection identifier of the user plane network element, which is helpful for the correct transmission of service messages.

[0152] The release mechanism of the MASQUE connection is introduced below.

[0153] In a possible implementation, the user plane network element releases the first MASQUE connection and / or the second MASQUE connection when detecting that the service between the terminal and the application server is interrupted or ended. Based on this method, the power consumption of the user plane network element, the terminal, and the application server can be saved.

[0154] In a possible implementation, the terminal releases the first MASQUE connection when detecting that the service between the terminal and the application server is interrupted or ended. Based on this method, the power consumption of the user plane network element, the terminal, and the application server can be saved.

[0155] In a possible implementation, the application server releases the second MASQUE connection when detecting that the service between the terminal and the application server is interrupted or ended. Based on this method, the power consumption of the user plane network element, the terminal, and the application server can be saved.

[0156] The embodiment of FIG. 5 is described below in combination with the examples shown in FIG. 6 and FIG. 7. In the following embodiment, the user plane network element is taken as an UPF for example.

[0157] FIG. 6 is a flowchart of a communication method provided in an embodiment of the present application. The method includes the following steps:

[0158] At step 601, the AS sends identity information of the AS to the PCF. Accordingly, the PCF receives the identity information of the AS.

[0159] The AS sending the identity information of the AS to the PCF can be that the AS sends the identity information of the AS to the PCF through an interface between the AS and the PCF, or that the AS sends the identity information of the AS to the PCF through an AF in the core network.

[0160] The identity information of the AS includes at least one address information of the AS supporting MASQUE connection.

[0161] Each address information of the AS supporting MASQUE connection can be used to establish one or more MASQUE connections. For example, the identity information of the AS includes address information #1 of the AS supporting MASQUE connection, address information #2 of the AS supporting MASQUE connection, and address information #3 of the AS supporting MASQUE connection, and the AS can establish one or more MASQUE connections through each of the three address information.

[0162] Exemplarily, each address information of the AS supporting MASQUE connection includes at least one of an IP address of the AS, a port number of the AS, or a fully qualified domain name (FQDN) of the AS.

[0163] At step 602, the terminal sends a PDU session establishment request to the AMF. Accordingly, the AMF receives the PDU session establishment request.

[0164] After receiving the PDU session establishment request from the terminal, the AMF can select an SMF, and the SMF can obtain subscription information of the terminal from a UDM, etc.

[0165] At step 603, the PCF sends the identity information of the AS to the SMF. Accordingly, the SMF receives the identity information of the AS.

[0166] During the PDU session establishment process, the SMF can request policy and charging control (PCC) rule information from the PCF, and the PCF can include the identity information of the AS in the PCC rule information and send the PCC rule information to the SMF through a Session Management (SM) policy control service (Npcf_SMPolicyControl service) message, etc.

[0167] Exemplarily, the PCF sends the identity information of the AS to the SMF through the Npcf_SMPolicyControl service.

[0168] In step 604, the SMF selects a UPF supporting the MASQUE function.

[0169] The UPF supporting the MASQUE function means that the UPF supports establishing the MASQUE connection.

[0170] In step 605, the SMF sends the identity information of the AS to the UPF. Correspondingly, the UPF receives the identity information of the AS.

[0171] Exemplarily, after the SMF selects the UPF, the SMF can establish an N4 session connection with the UPF. The SMF sends the identity information of the AS to the UPF through the N4 interface (such as a session establishment / modification message transmitted through the N4). The UPF can save the identity information of the AS.

[0172] It should be noted that the above steps 601 to 605 can be executed multiple times, and the UPF obtains the identity information of different ASs. For example, the UPF obtains the identity information of AS#1, the identity information of AS#2, the identity information of AS#3, and the identity information of AS#4.

[0173] In step 606, the terminal establishes a user plane connection with the UPF.

[0174] Exemplarily, after the SMF establishes an N4 session connection with the UPF, the SMF can perform N1N2 message transfer with the AMF. The N1N2 message includes a PDU session ID, a PDU session establishment accept message, etc. The AMF can send the PDU session establishment accept message to the terminal through the access network device. After receiving the PDU session establishment accept message, the terminal completes the establishment of the user plane connection with the UPF.

[0175] In step 607, the terminal establishes a first MASQUE connection with the UPF.

[0176] In the process of establishing the first MASQUE connection with the UPF, the terminal sends the identity information of the AS to the UPF. The identity information of the AS includes address information of the AS, and the address information of the AS includes at least one of an IP address of the AS, a port number of the AS, or an FQDN of the AS.

[0177] At step 608a, after the first MASQUE connection is established, the terminal sends a first registration message to the UPF. Accordingly, the UPF receives the first registration message.

[0178] The first registration message includes the first client connection identifier of the terminal, the first virtual client connection identifier of the terminal, and the first target connection identifier of the UPF. The first virtual client connection identifier of the terminal is created by the terminal based on the first client connection identifier of the terminal.

[0179] At step 608b, the UPF sends a first response message to the terminal. Accordingly, the terminal receives the first response message.

[0180] After the UPF receives the first registration message, the UPF performs a conflict detection on the first client connection identifier of the terminal in the first registration message.

[0181] If the first client connection identifier of the terminal in the first registration message has not been registered, it indicates that the conflict detection is passed, i.e., no conflict occurs. The UPF sends a first response message to the terminal, and the first response message includes the first virtual target connection identifier of the UPF.

[0182] If the client connection identifier in the first registration message has been registered, it indicates that the conflict detection is failed, i.e., a conflict occurs. The UPF sends a first rejection message to the terminal, and the first rejection message is used to indicate that the first registration message of the terminal is rejected, i.e., the registration is rejected, so as to trigger the terminal to regenerate the client connection identifier and re-register.

[0183] If the UPF sends the first response message to the terminal at step 608, the following step 609 and subsequent steps are performed after step 608.

[0184] At step 609, the UPF determines whether the UPF establishes a MASQUE connection with the AS.

[0185] The UPF determines whether the UPF establishes a MASQUE connection with the AS according to the identity information of the AS obtained at steps 601-605 and the identity information of the AS obtained at step 607. If the identity information of the AS obtained at steps 601-605 includes the identity information of the AS obtained at step 607, it is determined that the UPF establishes a MASQUE connection with the AS.

[0186] For example, the UPF receives and stores the identity information of the AS#1, the identity information of the AS#2 and the identity information of the AS#3 through steps 601 to 605, and obtains the identity information #1 of the AS#1 through step 607, and the identity information #1 of the AS#1 includes the address information #1 of the AS. If the UPF determines that the identity information of the AS#1 includes the identity information #1 of the AS#1, the UPF determines to establish the MASQUE connection between the UPF and the AS#1 based on the identity information #1 of the AS#1.

[0187] In step 610, the UPF stores the mapping relationship between the address information of the AS, the address information of the terminal and the first client connection identifier of the terminal.

[0188] The UPF stores the mapping relationship, so as to facilitate the core network to charge the terminal and issue the PCC rule.

[0189] The address information of the AS includes at least one of the IP address of the AS, the port number of the AS or the FQDN of the AS. The AS refers to the AS indicated by the four-tuple information or the five-tuple information of the terminal.

[0190] The address information of the terminal includes the IP address of the terminal and / or the port number of the terminal.

[0191] The step 610 is an optional step.

[0192] In step 611, the UPF establishes a second MASQUE connection with the AS.

[0193] In step 612, after the establishment of the second MASQUE connection, the UPF sends a second registration message to the AS. Correspondingly, the AS receives the second registration message.

[0194] The second registration message includes the second client connection identifier of the UPF, the second virtual client connection identifier of the UPF and the second target connection identifier of the AS. The second virtual client connection identifier of the UPF can be created by the UPF based on the second client connection identifier of the UPF.

[0195] In step 613, the AS sends a second response message to the UPF. Correspondingly, the UPF receives the second response message.

[0196] After receiving the second registration message, the AS performs conflict detection on the second client connection identifier of the UPF in the second registration message.

[0197] If the second client connection identifier of the UPF in the second registration message is not registered, it indicates that the conflict detection is passed, i.e., no conflict occurs, and the AS sends a second response message to the UPF, where the second response message includes a second virtual target connection identifier of the AS. The second virtual target connection identifier of the AS can be created by the AS based on the second target connection identifier of the AS.

[0198] If the second client connection identifier of the UPF in the second registration message is registered, it indicates that the conflict detection is not passed, i.e., a conflict occurs, and the AS sends a second rejection message to the UPF, where the second rejection message is used to indicate rejection of the second registration message of the UPF, i.e., rejection of registration. After receiving the second rejection message, the UPF re-generates the client connection identifier of the UPF and re-registers.

[0199] If the AS sends the second response message to the UPF in step 613, the following step 614 and subsequent steps are performed after step 613.

[0200] In step 614, the UPF saves the mapping information.

[0201] For the meaning of the mapping information and different implementation manners, refer to the description in the foregoing step 402.

[0202] In step 615, the AS sends a first downlink message to the UPF based on the service request of the terminal. Correspondingly, the UPF receives the first downlink message.

[0203] For the content carried by the first downlink message, refer to the related description in the foregoing embodiment of FIG. 4.

[0204] In step 616, the UPF sends a second downlink message to the terminal according to the first downlink message and the mapping information. Correspondingly, the terminal receives the second downlink message.

[0205] For the content carried by the second downlink message, refer to the related description in the foregoing embodiment of FIG. 4.

[0206] It should be noted that for the transmission of the uplink message, the terminal can send a first uplink message to the UPF. The UPF sends a second uplink message to the AS according to the first uplink message and the mapping information. For the content carried by the first uplink message and the second uplink message, refer to the related description in the foregoing embodiment of FIG. 4.

[0207] In step 617, the UPF performs QoS flow association and charging on the first downlink message.

[0208] The UPF determines address information corresponding to the first downlink packet according to the first client connection identifier of the terminal corresponding to the first downlink packet and the mapping relationship stored in step 610 after receiving the first downlink packet. The address information includes at least one of an IP address of the terminal, a port number of the terminal, an IP address of the AS, or a port number of the AS. Then, the UPF associates the first downlink packet with a corresponding QoS flow according to the address information, and charges the first downlink packet. Similar QoS flow association and charging operations are performed on other downlink packets or uplink packets (for example, the first uplink packet mentioned above).

[0209] This step is an optional step.

[0210] It should be noted that if the UPF needs to perform QoS flow association and charging on the uplink packet, the operation method is similar to that of the QoS flow association and charging on the downlink packet.

[0211] Step 618, when the terminal, the UPF or the AS detects that there is no subsequent service, the terminal, the UPF or the AS initiates a MASQUE connection release process.

[0212] The MASQUE connection release process can release the first MASQUE connection between the terminal and the UPF, and / or release the second MASQUE connection between the UPF and the AS.

[0213] Based on the above scheme, the UPF can establish a first MASQUE connection with the terminal and a second MASQUE connection with the UPF, and the UPF also determines mapping information, so that the UPF can correctly forward service packets between the terminal and the application server based on the first MASQUE connection and the second MASQUE connection and using the mapping information.

[0214] FIG. 7 is a flow diagram of a communication method provided by an embodiment of the present application. The method includes the following steps:

[0215] Step 701, the terminal sends a PDU session establishment request to the AMF. Correspondingly, the AMF receives the PDU session establishment request.

[0216] After receiving the PDU session establishment request from the terminal, the AMF can select an SMF, and then the SMF can obtain the subscription information of the terminal from the UDM.

[0217] Step 702, the SMF selects a UPF supporting the MASQUE function.

[0218] The UPF supporting the MASQUE function means that the UPF supports establishing a MSAQUE connection.

[0219] Optionally, the SMF also sends indication information #1 to the UPF, the indication information #1 being used to indicate identity information of the UPF supporting creation of the MASQUE connection, the identity information including an IP address of the UPF and / or a port number of the UPF.

[0220] At step 703, the terminal establishes a user plane connection with the UPF.

[0221] Exemplarily, after the SMF establishes the N4 session connection with the UPF, the SMF can perform N1N2 message transfer with the AMF, the N1N2 message including a PDU session ID, a PDU session establishment accept message, etc., and the AMF can send the PDU session establishment accept message to the terminal through the access network device. After receiving the PDU session establishment accept message, the terminal completes establishment of the user plane connection with the UPF.

[0222] Also, in the process of establishing the user plane connection with the UPF, the SMF or the UPF also sends identity information of the UPF to the terminal, and optionally, the SMF or the UPF also sends indication information #2 to the terminal, the indication information #2 being used to indicate that the identity information of the UPF supports creation of the MASQUE connection.

[0223] At step 704, the terminal establishes a first MASQUE connection with the UPF based on the identity information of the UPF.

[0224] If the terminal also receives the indication information #2 used to indicate that the identity information of the UPF supports creation of the MASQUE connection, the terminal establishes the first MASQUE connection with the UPF based on the identity information of the UPF and the indication information #2. If the indication information #2 is not received, it is defaulted that the identity information of the UPF supports creation of the MASQUE connection, and then the first MASQUE connection is established with the UPF according to the identity information of the UPF.

[0225] In the process of establishing the connection with the UPF, the terminal sends address information of the AS to the UPF, the address information of the AS including at least one of an IP address of the AS, a port number of the AS, or a FQDN of the AS.

[0226] At step 705, after the first MASQUE connection is established, the terminal sends a first registration message to the UPF. Correspondingly, the UPF receives the first registration message.

[0227] The first registration message includes a first client connection identifier of the terminal, a first virtual client connection identifier of the terminal, and a first target connection identifier of the UPF. The first virtual client connection identifier of the terminal is created by the terminal based on the first client connection identifier of the terminal.

[0228] At step 706, the UPF sends a first response message to the terminal. Accordingly, the terminal receives the first response message.

[0229] After receiving the first registration message, the UPF performs a conflict detection on the first client connection identifier of the terminal in the first registration message.

[0230] If the first client connection identifier of the terminal in the first registration message has not been registered, it indicates that the conflict detection is passed, i.e., no conflict occurs. Then, the UPF sends a first response message to the terminal, and the first response message includes the first virtual target connection identifier of the UPF.

[0231] If the client connection identifier in the first registration message has been registered, it indicates that the conflict detection is failed, i.e., a conflict occurs. Then, the UPF sends a first rejection message to the terminal, and the first rejection message is used to indicate that the first registration message of the terminal is rejected, i.e., the registration is rejected, so as to trigger the terminal to regenerate the client connection identifier and re-register.

[0232] If the UPF sends the first response message to the terminal at step 706, the following step 707 and subsequent steps are executed after step 706.

[0233] At step 707, the UPF determines to establish a second MASQUE connection between the UPF and the AS.

[0234] If the SMF sends the indication information #1 to the UPF at step 702, the indication information #1 is used to indicate the identity information of the UPF supporting the creation of the MASQUE connection. Then, the UPF determines to establish the MASQUE connection between the UPF and the AS according to the indication information #1.

[0235] If the SMF does not send the indication information #1 to the UPF at step 702, the UPF defaults that the identity information of the UPF supports the creation of the MASQUE connection, and then determines to establish the MASQUE connection between the UPF and the AS.

[0236] Steps 708 to 716 are the same as steps 610 to 618 in the embodiment of FIG. 6.

[0237] Based on the above scheme, the UPF can establish a first MASQUE connection with the terminal, and a second MASQUE connection with the UPF, and the UPF further determines mapping information, so that the UPF can correctly forward service packets between the terminal and the application server based on the first MASQUE connection and the second MASQUE connection, and by using the mapping information.

[0238] FIG. 8 shows a possible exemplary block diagram of a communication apparatus involved in the embodiments of the present application. The communication apparatus 800 shown in FIG. 8 can include modules or units for implementing the above-mentioned method embodiments. In one possible design, the communication apparatus 800 includes a processing unit 802 and a communication unit 803. Optionally, the communication apparatus 800 can further include a storage unit 801 for storing apparatus program codes and / or data.

[0239] The communication apparatus 800 can also be a network side apparatus in the above-mentioned embodiments, for example, a network side user plane network element, a module (such as a circuit, a chip or a chip system, etc.) in the user plane network element, or a logic node, a logic module or software capable of realizing all or part of the functions of the user plane network element.

[0240] For example, in one embodiment, the processing unit 802 is configured to obtain a first virtual client connection identifier of a terminal corresponding to a first MASQUE connection and a first virtual target connection identifier of a user plane network element, and a second virtual client connection identifier of the user plane network element corresponding to a second MASQUE connection and a second virtual target connection identifier of an application server; wherein the first MASQUE connection is a MASQUE connection between the user plane network element and the terminal, and the second MASQUE connection is a MASQUE connection between the user plane network element and the application server; the first virtual client connection identifier of the terminal and the first virtual target connection identifier of the user plane network element are used for transmission of service packets between the terminal and the user plane network element, and the second virtual client connection identifier of the user plane network element and the second virtual target connection identifier of the application server are used for transmission of service packets between the user plane network element and the application server; determine mapping information, the mapping information is used to indicate the mapping relationship between the first virtual client connection identifier of the terminal and the second virtual client connection identifier of the user plane network element, and the mapping relationship between the first virtual target connection identifier of the user plane network element and the second virtual target connection identifier of the application server; wherein the mapping information is used to forward service packets transmitted between the terminal and the application server through the first MASQUE connection and the second MASQUE connection.

[0241] In a possible implementation, the processing unit 802, for obtaining the first virtual client connection identifier of the terminal corresponding to the first MASQUE connection and the first virtual target connection identifier of the user plane network element, comprises: a receiving unit 801 configured to receive, through the communication unit 803, a first registration message from the terminal, the first registration message comprising the first virtual client connection identifier of the terminal and the first target connection identifier of the user plane network element; and a determining unit configured to determine the first virtual target connection identifier of the user plane network element according to the first target connection identifier of the user plane network element.

[0242] In a possible implementation, the first registration message further comprises identity information of the application server; and the processing unit 802 is further configured to establish the second MASQUE connection between the user plane network element and the application server according to the identity information of the application server.

[0243] In a possible implementation, the processing unit 802 is further configured to determine the second target connection identifier of the application server according to the identity information of the application server.

[0244] In a possible implementation, the processing unit 802, for obtaining the second virtual client connection identifier of the user plane network element and the second virtual target connection identifier of the application server corresponding to the second MASQUE connection, comprises: a generating unit configured to generate the second virtual client connection identifier of the user plane network element; a sending unit configured to send, through the communication unit 803, a second registration message to the application server, the second registration message comprising the second target connection identifier of the application server; and a receiving unit configured to receive, through the communication unit 803, the second virtual target connection identifier of the application server from the application server, the second virtual target connection identifier of the application server being generated based on the second target connection identifier of the application server.

[0245] In a possible implementation, the processing unit 802, for generating the second virtual client connection identifier of the user plane network element, comprises: a generating unit configured to generate the second virtual client connection identifier of the user plane network element according to the second client connection identifier of the user plane network element.

[0246] In a possible implementation, the processing unit 802 is further configured to, before obtaining the first virtual client connection identifier of the terminal corresponding to the first MASQUE connection and the first virtual target connection identifier of the user plane network element, receive, through the communication unit 803, a third registration message from the terminal, the third registration message comprising a third client connection identifier of the terminal; and send, through the communication unit 803, first indication information to the terminal, the first indication information being used to indicate that the third client connection identifier of the terminal is in conflict.

[0247] In a possible implementation, the processing unit 802 is further configured to, before obtaining the second virtual client connection identifier of the user plane network element corresponding to the second MASQUE connection and the second virtual target connection identifier of the application server, send, through the communication unit 803, a fourth registration message to the application server, where the fourth registration message includes a fourth client connection identifier of the user plane network element; and receive, through the communication unit 803, second indication information from the application server, where the second indication information is used to indicate that the fourth client connection identifier of the user plane network element is in conflict.

[0248] In a possible implementation, the processing unit 802 is further configured to, in a case where it is detected that service interruption or end between the terminal and the application server, release the first MASQUE connection and / or the second MASQUE connection.

[0249] In a possible implementation, the mapping information is further used to indicate a mapping relationship between the first client connection identifier of the terminal and the second virtual client connection identifier of the user plane network element.

[0250] In a possible implementation, the mapping information is further used to indicate a mapping relationship between the second target connection identifier of the application server and the first virtual target connection identifier of the user plane network element.

[0251] In a possible implementation, the processing unit 802 is further configured to receive, through the communication unit 803, a first uplink packet from the terminal, where the first uplink packet includes a first virtual target connection identifier of the user plane network element; and send, through the communication unit 803, a second uplink packet to the application server according to the first uplink packet and the mapping information, where the second uplink packet includes a second virtual target connection identifier of the application server.

[0252] In a possible implementation, the first uplink packet further includes a first virtual client connection identifier of the terminal.

[0253] In a possible implementation, the second uplink packet further includes a first client connection identifier of the terminal.

[0254] In a possible implementation, the processing unit 802 is further configured to receive, through the communication unit 803, a first downlink packet, where the first downlink packet includes a second virtual client connection identifier of the user plane network element; and send, through the communication unit 803, a second downlink packet to the terminal according to the first downlink packet and the mapping information, where the second downlink packet includes a first client connection identifier of the terminal.

[0255] In a possible implementation, the first downlink message further includes a second virtual target connection identifier of the application server.

[0256] In a possible implementation, the second downlink message further includes a second target connection identifier of the application server.

[0257] The communication apparatus 800 can be a terminal-side device in the above-described embodiments, for example, a terminal or a communication module in the terminal, or a circuit or chip responsible for communication functions in the terminal.

[0258] For example, in one embodiment, the processing unit 802 is configured to send, by using the communication unit 803, a first registration message to a user plane network element, the first registration message including a first target connection identifier of the user plane network element; and receive, by using the communication unit 803, a first virtual target connection identifier of the user plane network element from the user plane network element, the first virtual target connection identifier of the user plane network element being determined according to the first target connection identifier of the user plane network element.

[0259] In a possible implementation, the first registration message further includes a first client connection identifier of the terminal and / or a first virtual client connection identifier of the terminal.

[0260] In a possible design, when the communication apparatus 800 is a terminal or a communication module in the terminal, the function of the processing unit 802 can be implemented by one or more processors. Specifically, the processor can include a modem chip, or a system on chip (SoC) chip or SIP chip including a modem core. The function of the communication unit 803 can be implemented by a transceiver circuit.

[0261] In a possible design, when the communication apparatus 800 is a circuit or chip responsible for communication functions in the terminal, such as a modem chip or a system on chip (SoC) chip or SIP chip including a modem core, the function of the processing unit 802 can be implemented by circuitry including one or more processors or processor cores in the above chip. The function of the communication unit 803 can be implemented by an interface circuit or a data transceiver circuit on the above chip.

[0262] It can be understood that the division of units in the above apparatus is only a logical function division, one function can correspond to one functional unit, or two or more functions can be integrated into one functional unit. In actual implementation, all or part of the units can be integrated into one physical entity, or can be distributed in different physical entities. In addition, the above functional units can be realized in the form of hardware, or in the form of software, or in the form of hardware combined with software. Whether a certain function is executed in the form of hardware or software depends on the specific application and design constraints of the technical scheme. Professional technicians can use different methods to implement the described functions for specific applications, but such implementation should not be considered beyond the scope of the present application.

[0263] In one example, the functional units in any of the above apparatuses can be one or more integrated circuits configured to implement the above methods, such as one or more application specific integrated circuits (ASICs), or one or more central processing units (CPUs), one or more microcontroller units (MCUs), one or more digital signal processors (DSPs), or one or more field programmable gate arrays (FPGAs), or a combination of at least two of these integrated circuit forms.

[0264] In one example, the storage unit 801 can include random access memory, flash memory, read only memory, programmable read only memory, electrically erasable programmable memory, and / or registers, etc.

[0265] FIG. 9 shows a possible exemplary block diagram of a communication apparatus involved in the embodiments of the present application. The communication apparatus 900 shown in FIG. 9 includes a processor 910 and an interface circuit 920. The processor 910 and the interface circuit 920 are coupled to each other. It can be understood that the interface circuit 920 can be a transceiver or an input / output interface. Optionally, the communication apparatus 900 can also include a memory 930 for storing instructions executed by the processor 910 or storing input data required by the processor 910 to run instructions or storing data generated after the processor 910 runs instructions.

[0266] When the communication apparatus 900 is used to implement the above method embodiments, the processor 910 is configured to implement the functions of the above processing unit 802, and the interface circuit 920 is configured to implement the functions of the above communication unit 803.

[0267] It can be understood that the processor in the embodiments of the present application can be a central processing unit (CPU), and can also be other general-purpose processors, digital signal processors (DSP), application specific integrated circuits (ASIC), field programmable gate arrays (FPGA) or other programmable logic devices, transistor logic devices, hardware components or any combination thereof. The general-purpose processor can be a microprocessor or any conventional processor.

[0268] The present application provides a chip (or a chip system), which comprises a processor configured to implement any of the method embodiments described above.

[0269] The present application provides a computer readable storage medium, which stores a computer program or instructions, and when the computer program or instructions are executed, any of the method embodiments described above is implemented.

[0270] The present application provides a computer program product, which comprises a computer program or instructions, and when the computer program or instructions are executed, any of the method embodiments described above is implemented.

[0271] The present application provides a communication system, which comprises a user plane network element and an application server in the method embodiments described above. Optionally, the communication system further comprises a terminal in the method embodiments described above.

[0272] The method steps in the embodiments of the present application can be implemented in the form of hardware or by a processor executing software instructions. The software instructions can be composed of corresponding software modules, and the software modules can be stored in a random access memory, a flash memory, a read-only memory, a programmable read-only memory, an electrically erasable programmable read-only memory, a register, a hard disk, a mobile hard disk, a compact disc read-only memory (CD-ROM) or any other form of storage medium well known in the art. An exemplary storage medium is coupled to the processor, so that the processor can read information from and write information to the storage medium. Of course, the storage medium can also be an integral part of the processor. The processor and the storage medium can be located in an ASIC. In addition, the ASIC can be located in the first network element or the store-and-forward ground function network element. Of course, the processor and the storage medium can also exist as discrete components in the user plane network element or the application server.

[0273] In the above embodiments, all or part of the embodiments can be implemented by software, hardware, firmware or any combination thereof. When implemented by software, all or part of the embodiments can be implemented in the form of a computer program product. The computer program product includes one or more computer programs or instructions. The computer program refers to a set of instructions for instructing an electronic computer or other devices with message processing capability to perform each step. The computer program is usually written in a certain programming language and runs on a certain target architecture. When the computer program or instructions are loaded and executed on the computer, all or part of the processes or functions described in the embodiments of the present application are performed. The computer can be a general-purpose computer, a special-purpose computer, a computer network or other programmable devices. The computer program or instructions can be stored in a computer readable storage medium or transferred from one computer readable storage medium to another, for example, the computer program or instructions can be transferred from one website, computer, server or data center to another website, computer, server or data center through wired or wireless mode. The computer readable storage medium can be any available medium that can be accessed by a computer or a data storage device such as a server, data center and the like integrated with one or more available media. The available medium can be a magnetic medium, such as a floppy disk, a hard disk, a magnetic tape; or an optical medium, such as a digital video disc; or a semiconductor medium, such as a solid state disk. The computer readable storage medium can be a volatile or non-volatile storage medium, or can include both volatile and non-volatile storage media.

[0274] In various embodiments of the present application, the terms and / or descriptions of different embodiments are consistent and can be referred to each other if there is no special description and logical conflict. The technical features in different embodiments can be combined to form new embodiments according to their inherent logical relationship.

[0275] In the present application, "at least one" means one or more, and "multiple" means two or more. "And / or" describes the relationship between the associated objects, which means that there can be three kinds of relationships, for example, A and / or B, which can represent the following three cases: A exists alone, A and B exist together, and B exists alone, where A and B can be singular or plural. In the literal description of the present application, the character " / ", generally represents that the associated objects before and after are in an "or" relationship; in the formula of the present application, the character " / ", represents that the associated objects before and after are in a "division" relationship.

[0276] It can be understood that various numerical numbers involved in the embodiments of the present application are only distinguished for convenience of description, and are not used to limit the scope of the embodiments of the present application. The size of the serial numbers of the above processes does not mean the order of execution, and the execution order of the processes should be determined according to their functions and inherent logic.

[0277] The terms "system" and "network" in the embodiments of the present application can be used interchangeably. "At least one" means one or more, and "multiple" means two or more. "And / or" describes the association relationship of the associated objects, which means that there can be three relationships, for example, A and / or B, which means that A exists alone, A and B exist together, and B exists alone, where A and B can be singular or plural. The character " / " generally represents an "or" relationship between the associated objects before and after it. "At least one of the following" or similar expressions means any combination of these items, including any combination of single item or multiple items. For example, "at least one of A, B or C" includes A, B, C, AB, AC, BC or ABC, and "at least one of A, B and C" can also be understood to include A, B, C, AB, AC, BC or ABC. In addition, unless otherwise specified, the ordinal numbers "first", "second" and the like mentioned in the embodiments of the present application are used to distinguish a plurality of objects, and are not used to limit the order, time sequence, priority or importance of the plurality of objects.

[0278] Those skilled in the art should understand that the embodiments of the present application can be provided as a method, a system or a computer program product. Therefore, the present application can take the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware aspects. Moreover, the present application can take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, optical storage, etc.) including computer-usable program code.

[0279] The present application is described with reference to flowcharts and / or block diagrams according to the methods, devices (systems) and computer program products of the present application. It should be understood that each flow and / or block in the flowcharts and / or block diagrams, and the combination of flows and / or blocks in the flowcharts and / or block diagrams can be implemented by computer program instructions. These computer program instructions can be provided to the processor of a general-purpose computer, a special-purpose computer, an embedded processor or other programmable data processing device to produce a machine, so that the instructions executed by the processor of the computer or other programmable data processing device produce a device for implementing the functions specified in one or more flows in the flowcharts and / or one or more blocks in the block diagrams.

[0280] These computer program instructions can also be stored in a computer readable memory that can direct a computer or other programmable data processing apparatus to function in a particular manner, such that the instructions stored in the computer readable memory produce an article of manufacture including instructions which implement the function specified in the flowchart or flowsheets and / or block or blocks of the block diagrams.

[0281] These computer program instructions can also be loaded onto a computer or other programmable data processing apparatus to cause a series of operational steps to be performed on the computer or other programmable apparatus to produce a computer implemented process such that the instructions which execute on the computer or other programmable apparatus provide steps for implementing the functions specified in the flowchart or flowsheets and / or block or blocks of the block diagrams.

[0282] Obviously, numerous modifications and variations of the present application are possible in light of the above teachings. It is therefore to be understood that within the scope of the claims and their equivalents, the application can be practiced otherwise than as specifically described.

Claims

1. A communication method characterized by comprising: The method comprises: obtaining a first virtual client connection identifier of a terminal corresponding to a first Multipath Application Specific Quick User Datagram Protocol (UDP) Network Connection Encryption (MASQUE) connection and a first virtual target connection identifier of a user plane network element, and a second virtual client connection identifier of the user plane network element corresponding to a second MASQUE connection and a second virtual target connection identifier of an application server; wherein the first MASQUE connection is a MASQUE connection between the user plane network element and the terminal, and the second MASQUE connection is a MASQUE connection between the user plane network element and the application server; the first virtual client connection identifier of the terminal and the first virtual target connection identifier of the user plane network element are used for transmission of service messages between the terminal and the user plane network element, and the second virtual client connection identifier of the user plane network element and the second virtual target connection identifier of the application server are used for transmission of service messages between the user plane network element and the application server; determining mapping information, which is used to indicate a mapping relationship between the first virtual client connection identifier of the terminal and the second virtual client connection identifier of the user plane network element, and a mapping relationship between the first virtual target connection identifier of the user plane network element and the second virtual target connection identifier of the application server; wherein the mapping information is used to forward service messages transmitted between the terminal and the application server through the first MASQUE connection and the second MASQUE connection.

2. The method of claim 1, wherein, The method comprises: receiving a first registration message from the terminal, wherein the first registration message comprises the first virtual client connection identifier of the terminal and the first target connection identifier of the user plane network element; determining the first virtual target connection identifier of the user plane network element according to the first target connection identifier of the user plane network element.

3. The method of claim 2, wherein, The first registration message further comprises identity information of the application server. The method further comprises: establishing the second MASQUE connection between the user plane network element and the application server according to the identity information of the application server.

4. The method of claim 3, wherein, The method further comprises: determining the second target connection identifier of the application server according to the identity information of the application server.

5. The method of any one of claims 1 to 4, wherein, The method comprises: generating the second virtual client connection identifier of the user plane network element; sending a second registration message to the application server, wherein the second registration message comprises the second target connection identifier of the application server; receiving the second virtual target connection identifier of the application server from the application server, wherein the second virtual target connection identifier of the application server is generated based on the second target connection identifier of the application server.

6. The method of claim 5, wherein, The method comprises: generating the second virtual client connection identifier of the user plane network element. According to the second client connection identifier of the user plane network element, a second virtual client connection identifier of the user plane network element is generated.

7. The method of any one of claims 1 to 6, wherein, Before the first virtual client connection identifier and the first virtual target connection identifier of the user plane network element corresponding to the first MASQUE connection are acquired, the method further includes: receiving a third registration message from the terminal, the third registration message including a third client connection identifier of the terminal; sending first indication information to the terminal, the first indication information being used to indicate that the third client connection identifier of the terminal is in conflict.

8. The method of any one of claims 1 to 7, wherein, Before the second virtual client connection identifier of the user plane network element and the second virtual target connection identifier of the application server corresponding to the second MASQUE connection are acquired, the method further includes: sending a fourth registration message to the application server, the fourth registration message including a fourth client connection identifier of the user plane network element; receiving second indication information from the application server, the second indication information being used to indicate that the fourth client connection identifier of the user plane network element is in conflict.

9. The method of any one of claims 1 to 8, wherein, The method further includes: in a case where the service interruption or end between the terminal and the application server is detected, releasing the first MASQUE connection and / or the second MASQUE connection.

10. The method of any one of claims 1 to 9, wherein, The mapping information is further used to indicate a mapping relationship between the first client connection identifier of the terminal and the second virtual client connection identifier of the user plane network element.

11. The method of any one of claims 1 to 10, wherein, The mapping information is further used to indicate a mapping relationship between the second target connection identifier of the application server and the first virtual target connection identifier of the user plane network element.

12. The method of any one of claims 1 to 11, wherein, The method further includes: receiving a first uplink packet from the terminal, the first uplink packet including the first virtual target connection identifier of the user plane network element; according to the first uplink packet and the mapping information, sending a second uplink packet to the application server, the second uplink packet including the second virtual target connection identifier of the application server.

13. The method of claim 12, wherein, The first uplink packet further includes the first virtual client connection identifier of the terminal.

14. The method of claim 12 or 13, wherein, The second uplink packet further includes the first client connection identifier of the terminal.

15. The method of any one of claims 1 to 14, wherein, The method further includes: receiving a first downlink packet, the first downlink packet including the second virtual client connection identifier of the user plane network element; according to the first downlink packet and the mapping information, sending a second downlink packet to the terminal, the second downlink packet including the first client connection identifier of the terminal.

16. The method of claim 15, wherein, The first downlink packet further includes the second virtual target connection identifier of the application server.

17. The method of claim 15 or 16, wherein, The second downlink packet further includes the second target connection identifier of the application server.

18. A communications device, characterized by The apparatus includes a module for performing the method of any one of claims 1 to 17.

19. A computer program product, characterised in that, The computer program product includes instructions which, when executed, implement the method of any one of claims 1 to 17.

20. A computer-readable storage medium, characterized in that, The storage medium has stored therein a computer program or instructions which, when executed, implement the method of any one of claims 1 to 17.

21. A chip, characterized by The chip includes a processor configured to implement the method of any one of claims 1 to 17.

Images